Search code examples
windowsuwpwindows-firewall-api

What is an app container on Windows?


I am trying to debug a code which uses NetworkIsolationEnumAppContainers(). The document of the function says,

"The NetworkIsolationEnumAppContainers function enumerates all of the app containers that have been created in the system."

What does app container in the above definition mean? I have some experience with Linux container technologies (LXC particularly). Are they the same (or similar conceptually)? Can you point me to a document which provides as in depth technical description of app containers.


Solution

  • AppContainers are a sandbox mechanism which control what resources an UWP app can access or not. The UWP app have only access to a limited part of the file system, registry etc... The app container is also enforcing some rules about the network connectivity. For example, UWP apps cannot access the localhost. The network capabilities are driven by the manifest of the UWP app which must declare what it want to do (client, client+server). Based on the declaration of the app, the server will allow or not the network.

    You should be able to find more detailed information here: